General

  • Target
    [Ryuugames] RY-RJ01437730_V2.1.7_dlcs.rar
  • Size 1019.9MB
  • Sample261024-q8g1savtes
  • SHA256 2d20f5c8c7bebe8a30858b45848925778c35fd8a9dcb3016e75a7c50fd0f8f95
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Portable.exe
    • Size 362.7MB
    • SHA256 40728b9dcbb38697a13d8cb4fa8404919c283dfc444bbda2dd701edb71d0be37
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Target
      DokiDoki-Massage-v2.1.7/DokiDoki-Massage-Setup.exe
    • Size 335.7MB
    • SHA256 451eae42db69b4603624492867d2092bc53dcd44b77a77028a90aee99b9a9c3e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks